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(54) METHOD FOR TRANSFERRING SCRAMBLE KEY 

(57)Abstract: 

PROBLEM TO BE SOLVED: To obtain the method for transferring a scramble key 
from a security element to a decoder. 

SOLUTION: This transfer method is conducted in an input stage, a challenge stage 
and an opening stage. In the input stage, a security element, including a scramble key 
whose cipher, is decoded exchanges a message with a decoder, and as a result, the 
decoder has items consisting of data representing all or a part of the scramble key 
whose cipher is decoded and data representing data, capable of authenticating a 
smart card in a one-to-one form at the end of the input stage. In the challenge state, 
the data are transferred from the decoder to the smart card. As a result, which of the 
received data is disclosed is represented. Preferably, explicitness of the received data 
is conducted at random. In the opening stage, the smart card transfers data of all or a 
part of the scramble key the cipher of which is decoded to the decoder, together with 
the data capable of authenticating the smart card. 
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CLAIMS 



[Claim(s)] 

[Claim 1] In the approach of transmitting the scramble key decrypted from the 
security element (1) to the decoder (2) Data of the n beginnings outputted from the 

security element (1) (X1, Y) 0 (X2, Y) (Xn. Y) are put in into a decoder (2) (Ml, M2, 

and ...) It is Mj Mn phase and said n is two or more integers. The phase where each 

data into which it was put by said n beginnings consists of the first data (Xj) which 
make all or part (Y), and security element (1) of a scramble key (KD) which were 
decrypted attest. The 2nd n data (Z1, Y) ((Z2, Y), ... (it Zj(s))) (Zn, Y) to Y), ..., p data 

(Zal, Y) 0 (Za2, Y) the data (d) that make it possible to choose (Zap, Y) are the 

phases of the challenge (C) transmitted to a security element (1) from a decoder (2). 
Said p is an integer smaller than n. Said each 2nd n data The phase which consists of 
the 2nd data (Xj) to which authentication of all of the decrypted scramble keys or a 
part (Y), and a security element (1) is carried out. The phase of opening (01, 02, ..., 
Op) which consists of p data transfers chosen from the security element (1) as the 
decoder (2) in the challenge phase (C), the data (XI, Y) ((X2, Y), and ...) put into the n 
beginnings p data (01 (Zal, Y) — ) transmitted in p data and the opening phase which 
were chosen from (Xn, Y) The approach characterized by consisting of a count phase 
which makes it possible to extract all or the part (Y) of a scramble key decrypted 
from 02 (Za2, Y) Op (Zap, Y). 

[Claim 2] The approach according to claim 1 of consisting of a phase which 
reconstructs a perfect scramble key when said phase to put in, an opening phase, and 
a count phase relate to a part of perfect scramble key (KD) (Y) behind said count 




phase. 

[Claim 3] Said phase (M1, M2, Mj, .... Mn) to put in is the approach according to 

claim 1 or 2 consist of three steps (M1, M2, M3), and an opening step (01, 02 Op) 

consists of two steps. 

[Claim 4] It is [ claim 1 performed at random thru/or ] an approach given in any 1 

term among 3 to choose p data (Zal, Y) ((Za2, Y) (Zap, Y)) from the 2nd n data (Z1, 

Y) ((Z2, Y) (Zj, Y) (Zn, Y)). 

[Claim 5] The data into which it was put by the n beginnings respectively (Cj) It is as 
a result of the first exclusive-OR function (5) in which the first data (Bj) and 2nd data 
(Gj) are applied. Said first data (Bj) It is the pseudo-random WORD generated with the 
application of seed (SJ) in the first pseudo-random generation vessel (4). Said 2nd 
data (GJ) It is the WORD generated from relating all or the parts of the 3rd data and 
the decrypted scramble keys (Y). Said opening phase consists of transmitting seed 
(SJ) and the 2nd data (GJ) to a decoder (2) from a security element (1). Said count 
phase In order to calculate the 4th data (EJ) based on applying Seed SJ to the 2nd 
pseudo-random generation machine (8) and to calculate the 5th data (FJ) The 4th 
data (EJ) and data (CJ) into which it was put are applied to the 2nd exclusive-OR 
function (9). If the 5th data (FJ) is the same as the 2nd data (GJ) transmitted by 
opening operation as compared with the 2nd data (GJ) to which the 5th data (FJ) is 
transmitted by opening operation as a result of a comparison It is [ claim 1 which 
consists of storing decrypted all or the part (Y) of scramble keys thru/or ] an 
approach given in any 1 term among 4. 



DETAILED DESCRIPTION 



[Detailed Description of the Invention] 

[ 0001 ] 

[Field of the Invention] the approach this invention transmits a scramble key — being 
related — especially — conditional — it is related with the approach of transmitting a 
scramble key between the security element of an access system, and a decoder, 
conditional — only the user who acquired the access which receives the service for 
its service can be provided with a service provider by the access system. There are 
for example, charged television systems in such a system. 

[ 0002 ] 

[Description of the Prior Art] The service offered by the service provider consists of 
an item to which the scramble was able to be applied by the scramble key so that it 
may be well-known to this contractor. The item to which the scramble was able to be 
applied is the level of the access assigned to the user, has a scramble canceled and 




is read by the user. The following [ the scrambled item ] IE (ECG) is written. EGG 
expresses the item which is not scrambled (ECG is the abbreviation for 
"Electronically Coded Goods"). 

[0003] In order to carry out scramble discharge of the item, a service provider 
supplies the scramble key used in order to scramble an item to each user. In order to 
maintain a scramble key at secrecy, a scramble key is supplied after being enciphered 
with the algorithm which used Key K. The scramble key as which versatility was 
enciphered is sent to various users in a control message. Hereafter, ECM [ a control 
message ] is written (ECM is the abbreviation for "Entitlement Control Message"). 
[0004] In order to give access to service only to the user who was able to grant 
access, a service provider provides each user with a smart card and a decoder. ECM 
is received by the decoder and a decoder transmits them to a smart card. A smart 
card contains the key K of the encryption algorithm of a scramble key. A scramble 
key is decoded by the smart card, it is restored by the decoder, and a decoder can 
carry out scramble discharge of the received item which was scrambled. 

[0005] 

[Problem(s) to be Solved by the Invention] The hacker who does the monitor of 
between a smart card and decoders is in the location which monitors the decrypted 
scramble key which flows from a smart card to a decoder. This expresses a fault, 
conditional — an access system is a stand-alone type system, and since the items IE 
(ECG) and ECM scrambled in that system are included on the information carrier of a 
stand-alone like a digital videodisc, this fault is still more serious. It is because the 
hacker who monitors the scramble key which is not enciphered can store these keys 
and they of the user who has not obtained authorization can be redistributed unjustly. 
The scrambled item which is included on a stand-alone information carrier will already 
be protected. 

[0006] conditional — when an access system is an online type, the scrambled item IE 
(ECG) is an item which consists of signals to which the space or cable top was 
simultaneously distributed from the single source to the various customers of a 
service provider. The hack (disturbance) of the decoded scramble key must be carried 
out on real time. The conditions of hacking become more difficult. However, there is 
danger of hacking on a link short enough comparatively until now [ high ]. 

[0007] This invention does not have these faults. 

[0008] 

[Means for Solving the Problem] This invention relates to the approach of 
transmitting the scramble key decrypted from the security element to the decoder. 
The above-mentioned approach of carrying out a transfer consists of the next phase. 
- In a decoder, it is the phase of putting in n data output of the beginning from a 
security element (pledge), and, as for n, each n data of two or more integers and the 
beginning into which it was put consists of the first data to which authentication of all 
of the decrypted scramble keys or a part, and a security element is carried out. 




[0009] - One data which makes it possible to choose p data from the 2nd n data is 
the phase of the challenge transmitted to a security element from a decoder, p is an 
integer smaller than n and each 2nd n data consists of all of the decrypted scramble 
keys or parts, and the 2nd data to which authentication of a security element is 
carried out. 

[0010] - The phase of opening which consists of transmitting p data chosen between 
challenge phases to a decoder from a security element. 

- The phase of the count which makes it possible to extract all or the part of 
scramble keys decrypted from p data chosen from the first n data into which it was 
put, and p data transmitted in the opening phase. 

[001 1] According to the specific embodiment of this invention, the method of 
transmitting the decrypted scramble key is as follows. 

- Each first n data into which it was put is as a result of the first exclusive-OR 
function applied to the first data and 2nd data, the first data are pseudo-random 
WORD generated from adding seed to the first pseudo-random generation machine, 
and the 2nd data is WORD generated from being connected with all of the 3rd data 
and the decrypted scramble keys, or a part. 

[0012] - An opening phase consists of transmitting seed and the 2nd data to a 
decoder from a security element. 

- The phase of count consists of a degree. 

- Calculate the 4th data based on applying seed to the 2nd pseudo-random 
generation machine. 

[0013] - In order to calculate the 5th data, apply the 4th data and guaranteed data to 
the 2nd exclusive-OR function. 

- Compare the 5th data with the 2nd data transmitted between actuation of opening. 

- If it turns out that it is the same as that of the 2nd data with which the 5th data 
was transmitted between actuation of opening as a result of a comparison, store 
decrypted all or the part of scramble keys. 

[0014] The advantage of this invention is protecting an exchange of the data between 
a security element and a decoder. 

[0015] 

[Embodiment of the Invention] Other descriptions and advantages of this invention 
become clear by reading one desirable embodiment of this invention with reference to 
an accompanying drawing. In the accompanying drawing, the same sign shows the 
same element. Drawing 1 shows fundamental drawing of the approach of transmitting 
the scramble key decrypted between the security element 1 and the decoder 2. A 
security element is a smart card preferably. 

[0016] As mentioned above, a scramble key is transmitted to a decoder 2 from a 
smart card 1 according to the principle of operation of putting in (pledge). The 
principle of operation which puts in data consists of putting into the 2nd side about a 
beginning side, without transmitting without encryption about the data defined 




beforehand. Next, a beginning side shows the data which are not enciphered to the 
2nd side between the continuing steps. It has possibility of checking the data of the 
side [ 2nd ] which is not enciphered corresponding with the data into which it was put. 
[0017] According to this invention, a beginning side is a smart card 1, the 2nd side is 
a decoder 2 and the data into which it is put consist of decrypted all or the part of 
scramble keys. The protocol for exchanging data between a smart card and a decoder 
consists of three phases intrinsically [ the phase to put in (pledging), a challenge 
phase, and an opening phase ]. 

[0018] In the phase to put in, the smart card 1 containing the decrypted scramble key 
exchanges a decoder 2 and a message. In the end of the phase to put in, a smart card 
1 exchanges a decoder 2 and a message by the approach of having the item which 
consists of data which enable a decoder to attest the data showing all or the part of 
scramble keys which is the form of 1 to 1 and was decrypted, and a smart card. 
Vocabulary called the data which make it possible to attest a smart card should be 
understood to be what means the data which make it possible to check that the hack 
(disturbance) of the smart card is not carried out. 

[0019] The information included in the decoder in the end of a guarantee phase as an 
advantageous point cannot obtain the data for attesting all of the decrypted scramble 
keys or a part, and a card in itself. In a challenge phase, in order to show which should 
be indicated among the data into which it was put, data are transmitted to a smart 
card from a decoder. It performs by the approach with random the data which should 
be indicated and into which it was put being shown preferably. 

[0020] In an opening phase, a smart card transmits the data which should be indicated 
by the decoder. That is, the data for attesting all of the decrypted scramble keys or a 
part, and a smart card are transmitted. A smart card 1 consists of the set (XI , Y) of 
data, (X2, Y) (Xn, Y). 

[0021] Each data (Xj, Y) 0= 1, 2 n) consists of data Y and data Xj. Data Y are 

decrypted all or the part of a scramble key. Data Xj are independent of a scramble 

key, and are data which make a smart card attest. Arrow heads Ml, M2 MJ Mn, 

C, 01, 02 Op show the various exchanges between a smart card 1 and a decoder 

2 . 

[0022] It is shown that arrow heads Ml and M2, .... Mj, .... Mn put in each data (XI, Y), 

(X2, Y) (Xn, Y). Preferably, putting in Mj+1 of data (XJ+1, Y) is performed after 

putting in MJ of data (Xj, Y). According to the desirable embodiment of this invention, 
the phase to put in consists of three steps of Ml, M2, and M3. More generally the 
phase to put in consists of an n step, and n is two or more integers. 

[0023] The data (Xj, Y) into which it was put by the decoder 2 are expressed as Mj (Xj, 
Y). As an advantageous point. Data Mj (Xj, Y) cannot identify Data Xj and Y by itself 
as mentioned above. The arrow head C shows the challenge phase. In a challenge 
phase, the data d chosen at random preferably are transmitted to a smart card 1 from 
a decoder 2. According to an operation of Data d, the microprocessor of a smart card 




1 transmits P data which chose p data and were chosen from n data (Z1, Y) contained 

in a smart card, (Z2, Y) (Zj, Y) (Zn, Y) in this way to a decoder 2 from a smart 

card 1. 

[0024] Each data (Zj, Y) (j= 1, 2 n) consists of data Y and data Zj. According to the 

embodiment of the beginning of this invention, Data Zj 1 . 2 n) are the same as 

Data Xj, and the data (Zj, Y) of them are the same as data (Xj, Y). 

[0025] According to other embodiments of this invention. Data Zj differ from Data Xj. 
According to the embodiment besides ♦*♦****♦ of this invention. Data Zj are carrying 
out mutual relation with Data Xj. An expression called the mutual relation of Data Zj 
and Data Xj is applied to data (Zj, Y) and (Xj, Y) various circuits, and/or an operator, 
and makes the extract of Data Y, and coincidence attest a smart card. The example 
of such an embodiment is explained by drawing 2 . 

[0026] n data (Z1, Y), (Z2, Y), .... (Zj, Y) p data chosen from (Zn, Y) consist of the 

set (Za1, Y) of data, (Za2, Y) (Zap(s), Y). In the transfer to a decoder 2 from the 

smart card 1 of p data (Zal, Y), (Za2, Y) (Zap, Y), arrow heads 01, 02 Op 

express the opening of each data (Zal, Y), (Za2, Y) (Zap, Y) in opening operation. 

[0027] Each data (Za1 , Y), (Za2, Y) the data stored after the opening of (Zap, Y) at 

the decoder 2 are expressed as 01 (Zal, Y), 02 (Za2, Y), .... Op (Zap, Y). Each p data 
Ok (Zak, Y) is in agreement with one of the data Mj (Xj, Y) into which it was put. An 
expression called the data Mj (Xj, Y) into which it was put, and the data Ok (Zak, Y) in 
agreement The data Ok (Zak, Y) whose data Zak correspond with Data Xj in the case 
of the embodiment of the beginning of this invention mentioned above. Or it should be 
understood that Data Zak mean Data Xj and the data Ok (Zak, Y) which are carrying 
out mutual relation in the case of other embodiments of this invention. 

[0028] According to this invention, a decoder 2 extracts Data Y from the data Ok 
(Zak, Y) equivalent to Data Mj (Xj, Y) and Mj (Xj, Y), and consists of a means MO which 
makes possible what a smart card 1 is attested for. Data Y are stored in memory 
circuit M when Data Y are extracted from Data Mj (Xj, Y) and Ok (Zak, Y) by the 
means MO. 

[0029] According to the desirable embodiment of this invention, in an opening phase, 
the phase to put in relates to two data of (Zal, Y), and (Za2, Y) in relation to three 
data of (XI, Y), (X2, Y), and (X3, Y). Data Y are decrypted all or the part of scramble 
keys as mentioned above. When it is the part of the scramble key by which Data Y 
were decrypted, operation mentioned above is performed in each various parts which 
constitute a scramble key. If an example is given, each data Y which is the part of the 
decrypted scramble key will consist of 7 or 8 bits, and a scramble key will be 
thoroughly reconfigurated with ten pass. Each pass makes a circuit MO extract Data Y. 
Perfect reconstruction of the enciphered scramble key KD is performed using 
memory circuit M. 

[0030] According to this invention, as an advantageous point, the transfer to a 
decoder 2 from the smart card 1 of Data Y is performed to authentication and 




coincidence of a smart card 1. Since the data which the smart card was not attested 
any longer, consequently were transmitted to the decoder must have been taken into 
consideration, it becomes impossible so, for the hacker who monitors the data 
exchanged between a smart card and a decoder to find out semantics to change 
these data. 

[0031] Drawing 2 expresses the specific embodiment of fundamental drawing shown in 
drawing 1 . Only putting in (pledging) and the operation of opening are expressed in 
drawing 2 . The various arrow heads from a smart card 1 to a decoder 2 express 
various exchanges of the data between a smart card 1 and a decoder 2. 

[0032] The arrow head MJ means putting the data Cj contained in a smart card 1 into 
a decoder 2. Arrow heads Oa and Ob express the opening step equivalent to step Mj 
to put in. Since it is convenient, the exchange of the data between the smart cards 1 
and decoders 2 which were expressed to drawing 2 relates to single step and single 
opening step. As mentioned above, according to the desirable embodiment of this 
invention, three data are put in by the decoder 2 and two opening steps (Oa, Ob) are 
actually performed from a smart card 1 to a decoder 2. 

[0033] According to the specific embodiment of drawing 2 , a smart card 1 consists of 
the generation machine 3 of random WORD, the pseudo-random generation machine 4, 
an exclusive-OR function 5 6, for example, a data association circuit like a data 
connection circuit, and a separation operator 7, and a decoder 2 stores the pseudo- 
random generation machine 8, the exclusive-OR function 9, a comparison circuit 10, 
and the various data Y, and if required, it will consist of a circuit M which 
reconfigurates the perfect key KD from the various data Y. 

[0034] The false data generation machine 8, the exclusive-OR function 9, and a 
comparison circuit 10 constitute the example of a circuit MO. The data Cj into which 
it was put are generated by applying Data BJ and Data C^j to the exclusive-OR 
function 5. So, [0035] 

[Equation 1] 



[0036] It can describe. Data Bj are pseudo-random WORD generated from the 
generation machine 4 with which Seed SJ is applied, and generate the seed SJ itself 
from the generation machine 3 of random WORD. Data GJ consist of WORD generated 
from association of Data DJ and Data Y. Association of Data DJ and Data Y is 
performed by connection. 

[0037] According to the desirable embodiment of this invention. Data Y are the part 
of the decrypted scramble key KD which consists of b bits. As an example, b is equal 
to 7 or 8 bits respectively to the enciphered scramble key which consists of 70 or 80 
bits. Data Y are generated from the separation circuit 7 where the decrypted 
scramble key KD is applied. The scramble key enciphered so that it might be well- 
known is transmitted to this contractor from a decoder 2 to a smart card 1 , and a 




smart card 1 includes the decryption circuit (it has not indicated to drawing 2 ) which 
makes it possible to restore the decrypted key KD. 

[0038] According to other embodiments of this invention, Data Y are the scramble 
key by which the whole was decrypted. According to this invention, an authentication 
procedure is activated whenever the enciphered scramble key is transmitted to a 
smart card 1 from a decoder 2. Since it is impossible to determine the data Bj 
generated from the pseudo-random generation machine 4, the expression with which 
1 to 1 of the data Gj maintained at secrecy by Naka of Cj was enciphered is Data Cj. 
[0039] If WORD CJ is transmitted to a decoder 2 from a smart card 1, the phase 
which Cj puts in will be completed. And an opening step is performed. In an opening 
step, two data Sj and GJ are transmitted to a decoder 2 from a smart card 1 . Data SJ 
are transmitted by Opening Oa and Data GJ are transmitted by Opening Ob. 

[0040] The transmitted seed SJ is applied to the pseudo-random generation machine 
8. According to Seed’s SJ operation, the pseudo-random generation machine 8 
generates Data EJ. And the ** data EJ and CJ into which it was put are applied to the 
exclusive-OR function 9. The data FJ generated from the exclusive-OR function 9 are 
compared with Data GJ by the comparison circuit 10. If Data EJ are in agreement with 
Data BJ, Data FJ are in agreement with Data GJ. 

[0041] It is here and is [0042]. 

[Equation 2] 




[0043] Namely, [0044] 
[Equation 3] 




[0045] It will be [0046] if it becomes EJ=BJ. 
[Equation 4] 




[0047] namely, FJ=GJ — so, the comparison operator 10 checks whether Data FJ are 
the same as Data GJ, or it is not the same. In such a case. Data Y are stored in 
Memory M. The scramble key by which the transfer of the scramble key from the 
smart card 1 using Challenge Handshake Authentication Protocol which was explained 
by drawing 1 and drawing 2 as an advantageous point to a decoder 2, on the other 
hand, corroborated that it was not the card with which a smart card is an 
authentication card and was hacked, and was transmitted to the decoder 2 on the 
other hand corroborates being taken out from the smart card which is not hacked 
truly. 




DESCRIPTION OF DRAWINGS 



[Brief Description of the Drawings] 

[Drawing 1] Fundamental drawing of the approach of transmitting the scramble key 
decrypted between the security element and the decoder by this invention is shown. 
[Drawing 2] The specific embodiment of a step with the approach shown in drawing 1 
is shown. 

[Description of Notations] 

1 Security Element 

2 Decoder 

3 Generation Machine of Random WORD 

4 Pseudo-random Generation Machine 

5 Exclusive-OR Function 

6 Data Association Circuit 

7 Separation Operator 

8 Pseudo-random Generation Machine 

9 Exclusive-OR Function 

10 Comparison Circuit 
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[ffsR^Zl HuiBI+»lft|igo^. HuiBAnsSPg. 
yx V x->^> ^;u+- 

(KD) 0-a?» (Y) %‘^ts.X'7 

X 1 1BI80 

:^-;s= 

[HaRHS] HufBAtli.SPg (Ml. M2. • • •. M 
j, • • •. Mn) (i3Ax-yr (Ml. M2. M3) 
(0 1. 0 2. • • 

•.Op) li2Xx'y^*'e.S^li5R^1 ^/'di2ielB 
«o:^>£o 

[if?R^4] pfSOx— S' ( (Za 1. Y) . (Za 
2. Y) . • • •. (Zap. Y) ) ^nffl0*20x 
— S' ( (Z 1. Y) . (Z2. Y) . • • •. (Z j. 
Y) . • • •. (Zn. Y) ) t''e>miRtictit=7y 
1 L 3 o3-Bt'f'n6' i wc 

IBtto:^)So 



[113^115] nfioawtcAtienrcx-^os>!7 (c 

j) li. a«]ox— S' (Bj) st>'m20x— S' (g 

j) (5) o^a 

BuIBa«)Ox-S' (B j ) li. K (S j ) 

(4) 

iilBmzOx-^ (Gj) 
(i. m30x-'S'*5ctl^Bg^ft?iKl!rnfcA'ZxV:2'/l/+ 
- (Y) 

59 -KT'^‘j. 

7x > ■? SPilS -t+a'dxY-xU^Vh 
(1) 6'6xX— ?' (2) tc. ->-K (S j) S0-m2 
Ox— S' (Gj) 

mEtmmii. 

->-KS J^®20jg«x>'?'A^fi!cS (8) (CJiffl-T 
^CtlzJ:^f^4C07^-'Si (E J) ^ItSL. 
H50x— S' (Fj) ^l+S-r^fci6lC. ^40x-S' 
(EJ) RtFAtienfcx-^ (CJ) ^m2 0StffiW 
i^SW«#g (9) (cJifflL. 

S 5 Ox— S' (Fj) ^t-X-y'^'t'^ly—yaylC 
T«)STr+l^m20x— S' (Gj) t\mL. 
Jt^oiea. H50x— S' (F j) m-X-y^t'^ 
U-'>aVlCTtejM?ti5S2 0x-S' (Gj) 2:11- 
Ta6+ltf. Si^ft¥i^Tt-nfcX'Zx>9';l/+-0^g|3Sfc 
ttSP» (Y) ^jg^^^-T5C<!:6'6^5ifARlI1^:t'L4 
o3-5t'-r*i*' 1 lIIBi60:^;S„ 

[000 1 ] 

*5§B^iiA^'x>9Vi/+-=£ 

0-b+ai;xY-xU/>h2:xX - S^'OF^T A A x V 

AxixlcJ:‘J+#—k:'AAP/WS^’lig»0+)—eA^?- 
0+F-li'A^§tt5tS?iJ^Sj#LfcX-W£(j-lcji«-r 
ilOd:d^->Ax/Alc(i. ^ 

if47 L/ tri>' 3 >'> A X A*'£ 

[0002] 

[jitsRoftffi] ^'H#(cii5EPOiP<. +)■- 1 £'aAp/\V 
S^'lcJ:oT]l«?n/c+t-lfA(d:. AAx>A;U+-(c 
J: yA-;'xVAVl/^6Htetlfciag6'6^5o A^xV 
AVU^JbHtenfdlS li. x-+f'lc|ij y IT 

OU'<;UT'. A^xVA'll/^W^-t+etl. X— 

A^'xVAVU^-^Fc^glil-XT I E (ECG) t 
mB^-nSo ECG(iA'S'x>'AVU?tlTl'75:l':®g^ 
ST (E C Gti"Electronical ly Coded Goods" OBST'cfe 

^) o 

[0 0 0 3] +^— e 

AAP/WSffi. ms^x'7^y7l\yt^tdsbizmi^‘h 
tl5A'?xVAVU+-^Sx-+ftC«*g-r%o AAxV 
AVl/+-^^if®lc«-:)fc46. A^^xVA/b^-li^F-K 
^ffil'/-c7;l/d'JA'AT0i^jb^n/i:^lCjft$S?n5o 




(3) 



1 -1 96 08 3 



^cfct'Ta>^a5IL-^f^t:5Men«o 
'>'(iECM<!:a!S?n§ (ECMli" Entitlement Cont 
rol Message" o 

[0 0 0 4] 

(Dy<?^x^4x^rdsbic. v—\£xynju^it^j. 

ECMIi 

Til— TZi-m^tiis^xy-b- 

^-Kicgj^-rSo 

0Bi#ib7^/l/irUXA0+-K^^tJo 

yzi-^izuxi- 

Titl. xH-Xlig«L/cX'>7>X>l/?tl/c^aO 
x -> 5 V c t 

[0 0 0 5] 

[l8B^)bTOL<t-5i:-rs^S] XT-h*-Kix=l 
X^- h*- K6'6 
T □ - ■?A5?En« tlfc X ^ 

sf 5ffiaicL'«o cn*^Xi^5^«-rtoT'S5« ^fe# 
^^^7^7-bX->XxAliX^> KTPV'Jf'rXcDv^Xx 
hT$>V. ^<D'>XxAT-tSX-?5VXlUS-tl/clii I 
E (ECG) St/ECM*\ 

X'^cO.ir^^X^ > 'jz±tcssn 

TL'5/c46. Sif 

^e«\ 0i^fb?+iTi'^b'X'?7>x;u+-^{3?§-r 
5/\'V*-lSc:tiero4^-^Xh7T^. ^iElCs 

5*'eT-$«o X^>HTPVtf$0+-t'';7±tc#*tl 
2. X ^ 7 > X;H?4a/cJS i li't li tiTl'^b'C 

[0 0 0 6] ^fW^7'J^-trX->XxL.6’!:tV74'>'$' 

X'>7'-/X/u?nfcna i e (ec 
G) it. ^rs^tdi'r-7i\^±^m-(Dmti'e>^-[^x 
XP/^VX0S>t?Oll§'\|^B^lcSB1S5-+i/-di^A'e«t 
»Bc5-nfcX'>7>X/b+-ttU 
7;i/5f'rAT'/\'y? («») /\ 

L 6 ' L ^*’« e . /\-y 

+ > + 5 ^ 'J > ■> 

rr ««, 

[0 0 0 7] 

[0 0 0 8 ] 

-b+nux-i- 

- X U > h *' 6 7 p - ti/cX ^ 5 > X 
yu+-^$£il|-r5:^;£ic^-r2.o ±IBI£il|-r^*aii;X 
(DlS|ig*'e:&^o 

-7x-XtcfcO'T. -tr+aiJ5"^--xUp<> h!b'60 
«ffl(Dnffl(0x-'S!tU7l?:An« (pledge) 

x—SJIS. Bg^»§!?:H/j:X'75>X;b+-<D^SI?$/c 
Sl>\ •b+aiJx^-xUp<Vh<0iSiI^?-li 
2)Sin<7)7— S»*'6?3:2.o 



[0 0 0 9] -^2<Dnfiro7— ?*'6p(i(7)x-^5- 
1 (i<^7-X*^7P-XA'6 
- t + X u -X up < > h ^ + u 

pgrsy. plinJ:U/J'^l'SI3ST'*U. S2(7)n(@(D 
#7— St(i. Bi^(SI^1*-n/i:XX7VX;b4^-<7)^gPS 
/■digP^J. St>\ -b+xU7-t'-xU7«Vh<D!SEE5? 

[0 0 10] -f^-\'Uy-XSPgOF^lc)M«1*-nfcp(@(7) 
T— ? ^-b4^ X 'J X -< -X U/ > h *'6 7 p - X tcfijll 

rsctft'ess^-xxvxwspio 

-S^TJ® n (1® Anetl/cx— ? P (@<0 

X— &t>\ :t-Xx>X®PgT'fcKi^nfcp(@®x 

— s « *' 6 Bi ^) Bi ^^ tlfcxx X V X ; i/+-®^HPS fdi 

[0 0 11] Bi^(B 

ti/cxx X >X;i/+-^t5J^-r 5:>5?£(i;A® jg u T- 

- SD ]® nfli ® An 6 tl / i :§ x -^( i , SI 0 ® x— ?S 
2 ®x-x 

fiSJ®M«xVX^^R2 
H'S-X- K^l)P^Si:<};6'6?g^-r2a(t(xVXA7- 
KT'S*Jv m2®x— Salims ®x-:X. SO\ 

SI? n/cx X X > X; 1/+ -®^gp ^ fdigp^ .b M)i-r 5 
ctft'e^^r^x-KT'S^o 
[0 0 12 ] -t-zf-y'fmmt. ->- Ksom 2 ® 

X-X^. -b=t^x'Jx^'-XUXVh6'exP-XAfS 

mt^ctiye>ri^o 

-X- 2 ®jg(«x VXA^filcSlCjgffl-rS C <btt 

<t^S4®x-x^f+m-r«c<b. 

[0 0 13] -^5®x-X^i+»-r5/c«)IC. ^4® 
x - XSt ?« SiE ? tl £: x - X ^. ^ 2 
tg[ciSffl-rSi:<!:o 

-ms®x-X^. ?-XxvX®S)fF®F^teeS?+x 

fcm2 ®x-x <bJ±«-r^ <bo 

-J±«l®ig*. S5 ®x-X*' 7|— XxvX®itlfF®P^ 
2 ® X - X <!: ^-T'S 5 C <b 
«\ Bg^ft?SI?tl/j:XXxXX;U+-®^g|5tfdSg|55^ 

[0014] •tr+xijx^--xux> 

h <!: X p - XT5 ® X - X ®-¥> y i; ‘J Z. t TS 

[0 0 15] 

LT ^: 5 g 0 ^®(! f « LL '- HM «^ Sct ; c : 

I^UM*^/T^LTt'2.o ID Hi. -b+xUx'i'-xUX 
V h 1 <bxP-X2®F^T'llg^«?SI?il£;XXxVX;l/ 
+-^«HSr5:^j£®S3f:0^*EI^5tLTL'«o -b4^x 
'Jx^-xUXXhli»tL<liX7-h*-K?'$ 




(4) 



1 1 -1 9 6 0 8 3 



COO 1 6] A 

(pledge) h* 

- K 1 X— >^Atl5i)! 

i^46^466+l/cx—Sf 
IC^LT. Bg^{b^LT'e2Sr«e:i:^<. micomiz 
A^a?.ci;/)'6^?)= :^(cigg< Ax'y 7coF5. mmm 
nTi'Si'x— ? 2 (ommto m 2 <o 

ffiijij, ?*\ Anen/cx 

-^5» <b-srrs c ii^dig-rs^sgtt^rrso 
[0 0 17] :$:?g0^lCcfctl«\ ^lO<DfflliAT-h*- 
KIT'SU. S20«x=3— jrzT-igy. AH6tl« 
x-^ A-?- X V 7;U+-<0^gp$fctt 

SP^^A'eS^o A7-h*-K^x=I-^'OF^T'x-^ 
^55j^-Ti.fc46®AP h=i;b«. An« (p I edg i 
ng) SPg. 7^+bV'A'm. 
wic3o®eiig*'es«o 
coo 1 8] An^lfiPglCjJt'T^ 

xVAVb+-€-#tJA7-h^-Kl «s xP-^'2<!: 

x-tr— Ati«®Pg<0iii?t>y icfcl'Tx 
xP-^'«. 1«10JKT\ Bi^W^Si-n/cA-^xV^ 
;l/+-(D^g|3^ /clSgp»:&a-rx- A i: AT- h*- K 
^iSilt 5 C <!: i; r ^ X - A 6' 8 3S: a 

<bl'x7D>£TAT-h:^-K1(is xP— Sf2ip< 

AT-h*-K5lgE-rSil<b^ 
^tg-b-r^x— S? i:L'xffli§liAT- h*- K6'Ax-> 
(«H) irnTt'^l'c;<t:^5iiSr5Ci:^^gg<!:-r^ 

coo 1 9] ^^iJ^*,!:LTs CSSIKPgcOI^^DUlcfelt 
«xP-^le^Stx51f®li. 
^/cA'7x>A';l/+-<D^gp^/'di®», Slf*- K^ 
ISiI-r5/c46<Dx-A^ff^c:<b«T^^l'„ 5^4' U> 
'A'ISPilcfet'Ts Anetl/cx-^ Ox 
^a^A:t*':&.^-rfc46{Cs x-A*’ixP— S^'6'8AT- 
hO-KlceiM?^^o 5?$L<ti. 
tl 6 tifc X— J! C i: ti. X > 

tli)o 

CO 0 2 0] at-ko- 

KlixP-^lCBS/T^^nS'^^x— ?^f£S-r-5o 
0g^ft¥^?tl/cA-?xVAlb+-O^g|?$£:tigP 
St>'AT-h0-K^igiI-r«/c46Ox-^$feig 
fSo AT- hO- K1 (ix—J^O-bx f< (XK 
Y) . (X2. Y) . • • •. (Xn. Y) A'8&5„ 

COO 2 1] §x-A (Xj. Y) (j=1. 2. • • 
•s n) IS. x-'JJYiix-AX j x— ?Y 

tl/c A^ X V Alb+-O^Tt fcliSBi^T- 
x-^X jliA^x>AVb4^-<bl«4±z;T\ AT 
- hO- KOiSSE5’5'-y:?.x-AT-$?)o $^6PM 1 . M 

2s • • *s Mjs • • *s Mos Cs 01s 02s • 

• -s OpliAT-h*-Kl <bxP-^'20F^oa>e7 



CO 0 2 2] 5^EPM1s M2s • • - s Mjs • • - s 
MnttSx— ? (Xls Y) s (X2s Y) s • • - s 
(Xns Y) ^Xtl^Zt^^sLZ^^^o J?SL<tts 

x-A (X j +1s Y) OM j +T^Xtl^Ztits X 
-A (xjs Y) 0M}^xti^ztizmi'zn^n 
*5l0«O»SLl'IISfe«lit!:J:;m#s AnsSPgtt 
Mis M2s M30 3Axx7*'6?5:i)o ctU-iSSWlC 
Cis Atl^SI«linAxx76'6^Us n(i2J-X±oe 

CO 0 2 3] xP-72lCAnen£:x— (Xjs 
Y) liMJ (Xjs Y) LTs 

auxELfcjiys x-AMj (Xjs Y) (is 
ttx-7X j <tY^iaSiJT'??5:L\ U>7 

SPg^S^LTt'^o ^i’UV'ASPglCfcP'Ts »SL< 
lixV7/.(CSJi^?+l5x-Ad«xP-72*'8AT 
-hO-KUCgjtirnS. x-^dOf^ffllc,fc‘Js A 
T- h*- K1 OTd” AP7P-bx7(S:AT- hO- K 
lC#^+l8n1iOx— S? (Zls Y) s (Z2s Y) s 

• • - s (Z js Y) s • • - s (Zns Y) 6'8pf® 
Ox-7?-JiJ;?Ls COcfcxtCJMJR^tlfcPfSOx-A 
5AT- hO- F 1 *'8xP— ? 2 iCfejM-r^o 

C0 0 2 4] #x-^ (Z j s Y) (j=K2s-- 
•s n) tix-^YSO’x-AZ j *'bJ5:5o 

®fflO*Sfi»ltSlC<i:+l«'s x-^Zj (j=1s 2s • 

• - s n) «x-AX j tl^-T'$‘Js x-A (Z j s 
Y) IS:x-7 (Xjs Y) tn-Zta^. 

CO 0 2 5] 9 -^ z 

j lix— Six j i:S^;5o *510^00 ctiSfteOKJgCg 
^icjztuj; L*'L&6^8s X— Si Z j (Sx— Si X j ,!: 
fflaggilLTt'^o X-SIZ j <bx-AX j OiBS^jS 
<bt'xaillis x-Si (Zjs Y) St/ (Xjs Y) 
tts a'f7O0KSt//'$/i:li:t^U-AlC®ffl5-ns x 
-• SiYOttbbs St/s PBSlCAT-hO-KOiSE^? 

c:oJ:x^ll)!ffi«l«oi?J«ia2T-K0^?n;5„ 
C0026] n(®Ox-Si (ZK Y) s (Z2s 
Y) s • • - s (Z js Y) s • • - s (Zns Y) *' 
8jSJR3-tl5pfliOx-AIS:x— SiO-bx h (ZaK 
Y) s (Za2s Y) s • • -s (Zaps Y) *'85: 
pC®Ox-A (Z a 1 s Y) s (Z a 2s Y) s • 

• - s (Zaps Y) OAT-hO-Fl*'8xP-7 

2^0KjStts 7 pv 7^^U— >3 Vlca/i:‘Js 

^WOls 02s • • - s Opli^-*l^‘nOx-Si (Z 
a Is Y) s (Za2s Y) s • • -s (Za ps Y) 
0^-7 pv7^^-To 

[0 027] ^n^tlOx-A (Za Is Y) s (Za 

2s Y) s • • *s (Zaps Y) 0^-7 p>70^ 

lCxP-72tc^S«rt^ti/-cx-:?liO 1 (Z a 1 s 
Y) s 02 (Za2s Y) s • • -s Op (Zaps 
Y) .bSS-tlSo pfiO#x— SiOk (Zaks Y) it 




(5) 



1 1 -1 9 6 0 8 3 



j (Xj. Y) <7)— •:?<!;— SjfSo 
Anetl/cx-^Mj (Xj. Y) t-SLt^^-'SiO 
k (Zak. Y) 

x— 5* Z a k*'ix—5fXj 
<h-SS{LTl-'5x— 5fOk (Zak. Y) . 2 |s: 

X— SJZakft’ix 

-■ ?X j S!0k (Zak. Y) 

[0 0 2 8] *5g0^tcd:n«\ TZl-^2it. 

j (X j . Y) S0=M j (X j . Y) 

Ok (Zak. Y) *'6x-^Y:&ttlliU A^-h* 

-Ki?:igsE-r^. 

?)o ^SMOlCctUx— 5?Y*’^X-^M j (Xj. Y) 

SO-Ok (Zak. Y) r-^Yli 

[0 0 2 9] Ati 

SSPglS (XK Y) , (X2. Y) . (X3. Y) (D 

3x— >[CMaL. :i— (ZaK 
Y) . (Za2. Y) <D2T—$ilCSSmt?>o mLfc 

mv. x-^YiiBg^(SK?n/cA^5vA/u+-®^ 
gpsfctigi35^T'S5o 

'> a 

S! Yti 7 Sfdi 8 fci-> KA'e!5: 
‘J. A^7 5>AVU+-{d:1 0M“AT'^^lcWifi£^+l 
«o ^A"A«[5]KM0tC,]:Ux— 
Bt^fb?n/-cA-?7>A'yl/+- K 

[0 0 3 0] 2|s:5g^(Ccj:<x«; 

Y(DAV-h*-Kl)b'exl]— AT 

-h*-Kl©iSEE<!:l5lB$lc^Tt)n5<, AT 

-h;0-Rit.[i-¥>|gK?tiT\ x=l— S«-[C 

AT-h*- 

K <t r □ - y ,!: y ? X- «/ \ 

[00 3 1 ] 02(i. la 1 lC/TT^tlfcS2|s:6^^iaODl#^ 
Eizicisi^zn. Ati^zt (p i 
e d g i ng) tt—y'-y^'(Dt'^ly—'> 
S^tlTL'^o X^-^^tl-F^i'ef^=J-‘St2'\<Dm 
AT-h*-Kli;x=l-'S^‘2(7)F5(7)x- 
•?<Oli>f70D-^ y <!: t) 5-S LTC'So 
[0 0 3 2] $^EPMjlS:. AT- h*- K1 
X— ?C J :&x=l— ?'2lCAni.c:i:^SLTl'5„ 

01O a RZfO b li Atl« Ax >> AM j A 

->AAx')/A^«LTl'So flE?iJ®fc46. [il2le«? 
n/cAT- h*- K1 <!:xa-A2<0F^<Dx-Aa)-^y 
(kyii, m-«DAn^Ar';/ARy'^-(D;i— A-AA 
Ax'yAlc^SLTl'So HI®. luJELfcctotc. 2|s:5g 



3x-Alix=i-A2 

icAtietls 2-3(7);d--A-AAAx'>A (Oa. O 
b) ft’s AT- h*- H'1 ft'ex=l-A2^C)i^LTH^^^ 

[0 0 3 3] 02Cft!^^(ftHSSSI1itCcfctl«\ AT-h 
*-Kl W5>AA9-KO^fiES3. 
fij6i§4. 

,i:3^x-AAyAX-'>a A0K6. 

7ft'6^*J. xa-A2ti. 1iffiTAAA^fi36S8. Sf 
fttWISS?Q«|g9. ib«0Kl 0. a>!70x-A 

Y^ftlWL. '^Sft:6«'a>!7<7)x-AYft'e^^^=t^- 
K D^S«lfi)6-r«aSSMft'6&^o 
[0 0 3 4] S«x-A^fi!6S8. Sf«tSaMtg9 
sifjtsiHiKi oiti^^Moomm^t^o Atieti 
fcx-A C j It. X-A B j i:x-A G j 
fP^#g5lc®ffl-r5c:.»:li;j:yil4-r5o 
[0035] 

[Sin] 

Cj = Bj 0 Gj 

[0 0 3 6] .hisaiuf^o X-AB j IS-A-KS j ft' 
®ffl?tl^Sf®S4ft'6f§Sr-5M«A AAI.A- KT' 
A-KS j i#lixAAA7-Kro^^S3*'e 
x-A G j IS. x-A D j <b X- A Y(ftie^ 
ft'6fg^r59-Kft'6^^o x-AD j tx-A Y(ft 
JiiiglCcfc V Hff 

[0 0 3 7] 2ls:^0^®J?S LL'HSg^^lCcfctllS. x- 
A Ylibtf-y hft'6^^Bi^)!fllg?Sift:AAxAAVU+ 
-KD(ftgP»T'S5o iJiJtLT. bis. 70Sft:IS80 
t'-y bft'0&5ligit1b?nft:AAxAA;l/+-lcil^LT 

^n^tl7$fclS8lb''y hlcULL'o x-AYIS. 0f^ 

Wm^tlfcAAx >A;l/+- K 
7ft'e?il^rSo ^H#lclSi^5EP05P<. Bg^fb^nfc 
AAx>A;U+-ISx=l-A'2ft'6AT- hft- K 1 a 
fejSJtl. AT- h ft- K 1 IS0i^«?^5-n/c+- K D 

(11121c 

[0 0 3 8] *|g0^ftfteOHM^ilCj:nif. X-A Y 

lS^«:<ft0f1^»?K75rtlft:AAxAA;U+-T-S«„ *51 
WlcJ:n«'. iSU^MIlS. 0i^fb^nft:AAxAAVU+ 
-ft<x=l-A'2ft'6AT- hft- K 1 'NgJS^ tiSJtlc 
ait^b^n^o ^1«xVAZ*Sfi)6S4ft'65gS-r5x- 
A B j C j 

«i85ICffift:tl^x- A G j (ft m 1 
lix-AC 

[0 0 3 9] A-KC j ^AT-hft-Klft'exd- 
A2-\$5JX*;5i;. C j (ftASl^SPglS^T-rSc 
T. *-Ax>A'Ax■yAft'!H^T^n^o t-lf-y'f 
Ax'y AlCfc'l'T. 2fi(ftx-A S j tG j ft’^AT- h 
ft-Flft'6x=l-A'2lCl5jM3-tT«o x-ASjli* 
-Ax>A'OalCc):yfEH^?tl. x-AGjlS*-Ax 




(6) 



1 1 -1 9 6 0 8 3 



[0 0 4 0 ] Ks j 

->-Ks jofFfflitcfcy. mu^y 
^LT. AtlS 

nfc/cx-^E j i:C j 

sf«iiaw«tg9*'eftfi)6-r5T— ?F jti. 
J±»?[5]K1 0(cJ:»Jx— JIG j ta.mtii>o T— StE 
j *''x— 5f B j ,h-iS-rnii\ X— S' F j ttr-iSf G j 
[c-arso 
[004 1 ] CilT- 
[0 0 4 2] 

[IS2] 
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